The Hacker News | #1 Trusted Cybersecurity News Site
WEBBroadcom on Tuesday released updates to address a critical security flaw impacting VMware vCenter Server that could pave the way for remote code execution. The vulnerability, tracked as CVE-2024-38812 (CVSS score: 9.8), has been described as a heap-overflow vulnerability in the DCE/RPC protocol . …
Vulnerability | News & Insights | The Hacker News
WEBCybersecurity researchers have discovered yet another critical security flaw in the LiteSpeed Cache plugin for WordPress that could allow unauthenticated users to take control of arbitrary accounts. The vulnerability, tracked as CVE-2024-44000 (CVSS score: 7.5), impacts versions before and including 6.4.1. It has been addressed in version 6.5.0.1.
News & Insights - The Hacker News
WEBYes, The Hacker News is celebrating its sixth anniversary today on 1st November. We started this site on this same day back in 2010 with the purpose of providing a dedicated platform to deliver latest infosec news and threat updates for Hackers, Security researchers, technologists, and nerds.
cyber attack | News & Insights | The Hacker News
WEBTop 3 Threat Report Insights for Q2 2024. Ivanti Warns of Active Exploitation of Newly Patched Cloud Appliance Vulnerability. Cybercriminals Exploit HTTP Headers for Credential Theft via Large-Scale Phishing Attacks. 17-Year-Old Arrested in Connection with Cyber Attack Affecting Transport for London. Apple Vision Pro Vulnerability Exposed ...
data breach | News & Insights | The Hacker News
WEBThe top three insights for enterprises are as follows. 1) IntelBroker: A Persistent Threat Actor in the Cyber Underground During an in-depth investigation into hacking communities and the dark web, Cato CTRL identified a notorious threat actor known as IntelBroker. IntelBroker is a prominent figure and moderator within the BreachForums hacking ...
Microsoft Patches Critical Copilot Studio Vulnerability Exposing ...
WEBAug 21, 2024 · Cybersecurity researchers have disclosed a critical security flaw impacting Microsoft's Copilot Studio that could be exploited to access sensitive information. Tracked as CVE-2024-38206 (CVSS score: 8.5), the vulnerability has been described as an information disclosure bug stemming from a server-side request forgery (SSRF) attack.
Experts Warn About Ongoing AutoHotkey-Based Malware Attacks
WEBMay 17, 2021 · Cybersecurity researchers have uncovered an ongoing malware campaign that heavily relies on AutoHotkey (AHK) scripting language to deliver multiple remote access trojans (RAT) such as Revenge RAT, LimeRAT, AsyncRAT, Houdini, and Vjw0rm on target Windows systems. At least four different versions of the campaign have been spotted starting ...
The Continuing Threat of Unpatched Security Vulnerabilities
WEBMar 8, 2022 · A report found that unpatched vulnerabilities are the most consistent and primary ransomware attack vectors. It was recorded that in 2021, 65 new vulnerabilities arose that were connected to ransomware. This was observed to be a twenty-nine percent growth compared to the number of vulnerabilities …
Zero-Day Alert: Update Chrome Now to Fix New Actively Exploited ...
WEBJan 17, 2024 · Google on Tuesday released updates to fix four security issues in its Chrome browser, including an actively exploited zero-day flaw. The issue, tracked as CVE-2024-0519, concerns an out-of-bounds memory access in the V8 JavaScript and WebAssembly engine, which can be weaponized by threat actors …
US Government Warns of a New Strain of Chinese 'Taidoor' Virus
WEBAug 4, 2020 · The US Cyber Command has also uploaded four samples of the Taidoor RAT on the public malware repository VirusTotal to let 50+ Antivirus companies check the virus's involvement in other unattributed campaigns. However, the malware itself is not new. In an analysis by Trend Micro researchers in 2012, the actors behind Taidoor were found to leverage socially engineered emails with malicious PDF ...
Skip to content